Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/QyQ0Uu3SwU9deKkCF5q9j0_B1Q8.roa
File: QyQ0Uu3SwU9deKkCF5q9j0_B1Q8.roa (raw, json)
Hash identifier: N8Y5xSz0ICCpZ4M4l26C5BtvUnZJpq6BzcQ778ti//M=
Subject key identifier: 43:24:34:52:ED:D2:C1:4F:5D:78:A9:02:17:9A:BD:8F:4F:C1:D5:0F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01890864495A872914FF30FFC35AF376311B
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/QyQ0Uu3SwU9deKkCF5q9j0_B1Q8.roa
Signing time: Thu 29 Jun 2023 18:22:17 +0000
ROA not before: Thu 29 Jun 2023 18:22:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.33.14.0/24 maxlen: 24
193.19.106.0/24 maxlen: 24
213.32.248.0/24 maxlen: 24
213.32.249.0/24 maxlen: 24
103.205.26.0/24 maxlen: 24
103.205.25.0/24 maxlen: 24
103.205.27.0/24 maxlen: 24
188.214.27.0/24 maxlen: 24
185.230.250.0/24 maxlen: 24
185.230.248.0/24 maxlen: 24
185.230.249.0/24 maxlen: 24
192.166.212.0/22 maxlen: 24
193.42.52.0/24 maxlen: 24
193.42.54.0/23 maxlen: 24
185.9.54.0/24 maxlen: 24
62.197.132.0/24 maxlen: 24
62.197.135.0/24 maxlen: 24
185.103.73.0/24 maxlen: 24
185.115.146.0/24 maxlen: 24
185.115.147.0/24 maxlen: 24
77.75.62.0/24 maxlen: 24
77.75.60.0/24 maxlen: 24
77.75.63.0/24 maxlen: 24
194.4.158.0/24 maxlen: 24
194.4.156.0/23 maxlen: 24
194.4.159.0/24 maxlen: 24
185.115.144.0/24 maxlen: 24
185.115.144.0/23 maxlen: 24
185.115.145.0/24 maxlen: 24
78.142.242.0/24 maxlen: 24
78.142.242.0/23 maxlen: 24
78.142.241.0/24 maxlen: 24
45.159.152.0/24 maxlen: 24
45.159.154.0/24 maxlen: 24
45.159.153.0/24 maxlen: 24
89.40.160.0/24 maxlen: 24
185.229.104.0/24 maxlen: 24
185.229.105.0/24 maxlen: 24
185.229.106.0/24 maxlen: 24
185.229.107.0/24 maxlen: 24
89.43.211.0/24 maxlen: 24
203.0.9.0/24 maxlen: 24
89.43.210.0/23 maxlen: 24
185.245.238.0/24 maxlen: 24
185.245.237.0/24 maxlen: 24
185.245.236.0/24 maxlen: 24
203.0.8.0/24 maxlen: 24
185.245.239.0/24 maxlen: 24
89.43.208.0/24 maxlen: 24
89.43.210.0/24 maxlen: 24
89.47.89.0/24 maxlen: 24
185.121.229.0/24 maxlen: 24
178.239.201.0/24 maxlen: 24
185.121.231.0/24 maxlen: 24
178.239.203.0/24 maxlen: 24
185.121.228.0/24 maxlen: 24
178.239.200.0/24 maxlen: 24
185.121.230.0/24 maxlen: 24
93.114.246.0/24 maxlen: 24
185.236.62.0/24 maxlen: 24
185.236.63.0/24 maxlen: 24
223.27.112.0/24 maxlen: 24
178.239.192.0/23 maxlen: 24
178.239.192.0/24 maxlen: 24
178.239.193.0/24 maxlen: 24
178.239.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:08:64:49:5a:87:29:14:ff:30:ff:c3:5a:f3:76:31:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 29 18:22:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43243452edd2c14f5d78a902179abd8f4fc1d50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a0:ef:70:96:ea:80:1b:c9:64:c6:3e:2c:37:
70:cd:69:31:41:28:5d:b0:f1:c6:ce:ae:90:00:c2:
d2:b8:6c:2c:bc:f9:9d:6a:fd:56:13:14:eb:34:0d:
30:49:62:f4:0f:fc:a3:06:c7:3c:e8:84:ad:ec:c7:
e6:f4:82:86:65:2e:26:c9:d3:6b:09:52:3e:ab:97:
27:6c:51:1f:4f:3d:6e:08:b7:60:9d:cf:c9:33:6d:
18:de:ee:01:08:d8:9f:3d:d2:07:1e:5e:14:42:37:
b1:76:ec:da:d0:73:6c:8d:a2:2c:7f:54:5f:ed:6a:
e0:9e:eb:ac:fe:d3:20:12:f3:a9:2b:3e:3b:d8:97:
f9:2f:2e:5d:06:e3:d5:24:c1:a8:7e:10:1b:dc:c1:
89:eb:00:cc:65:5a:bf:14:8e:1b:5f:7b:f5:29:87:
0c:6d:cb:2e:51:b8:df:e2:ce:55:c8:2d:b1:e4:65:
f7:1c:d9:a3:94:09:89:0e:b4:65:6e:49:05:f2:ca:
e1:9f:b5:6c:fc:81:1e:62:47:80:ad:52:00:2b:b4:
b1:f6:05:e3:2e:53:b4:6d:39:ea:89:86:5b:c1:4f:
32:28:0e:24:c8:9d:5a:cc:8e:0b:3f:88:fc:df:5a:
e5:29:ff:9e:93:95:20:e9:db:d2:f1:ac:cd:94:92:
f0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:24:34:52:ED:D2:C1:4F:5D:78:A9:02:17:9A:BD:8F:4F:C1:D5:0F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/QyQ0Uu3SwU9deKkCF5q9j0_B1Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.152.0-45.159.154.255
62.197.132.0/24
62.197.135.0/24
77.75.60.0/24
77.75.62.0/23
78.142.241.0-78.142.243.255
89.33.14.0/24
89.40.160.0/24
89.43.208.0/24
89.43.210.0/23
89.47.89.0/24
93.114.246.0/24
103.205.25.0-103.205.27.255
178.239.192.0-178.239.194.255
178.239.200.0/23
178.239.203.0/24
185.9.54.0/24
185.103.73.0/24
185.115.144.0/22
185.121.228.0/22
185.229.104.0/22
185.230.248.0-185.230.250.255
185.236.62.0/23
185.245.236.0/22
188.214.27.0/24
192.166.212.0/22
193.19.106.0/24
193.42.52.0/24
193.42.54.0/23
194.4.156.0/22
203.0.8.0/23
213.32.248.0/23
223.27.112.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c0:fd:c9:bc:e9:b6:4b:e7:84:6b:da:d7:34:1f:af:a6:bf:
48:db:f7:7f:b7:38:d9:b3:b7:f7:c3:6e:32:6c:e4:c9:fa:a9:
bf:4e:b1:db:3f:e9:a8:06:20:fb:82:fc:ad:62:2c:c6:d5:c5:
e5:95:0d:3d:5a:90:64:58:d6:5d:1e:8f:3f:0c:94:6a:fe:d8:
e7:a3:dd:cd:83:ff:39:92:42:bf:a2:e2:85:e8:40:c8:89:8a:
03:bd:45:88:60:23:bd:15:a3:05:d1:2f:59:4b:13:f4:97:f4:
67:10:ef:c7:7c:b2:b7:cd:d5:ab:f9:6d:55:b9:a5:b3:97:c6:
85:0e:90:c5:eb:6b:57:6d:55:70:38:34:ae:51:29:2c:4a:b1:
18:9a:30:81:4b:a6:a0:cd:f0:e6:61:78:03:0c:3a:03:bb:b0:
89:9d:58:ef:ab:82:42:a8:c4:96:fe:b2:c8:56:8a:ba:0c:b1:
28:3c:5a:2e:4e:08:cd:c1:9e:77:bb:ab:26:54:30:d1:0c:7b:
ba:da:10:b5:88:00:44:94:01:38:1a:79:11:80:fd:46:68:58:
3f:17:4e:f1:87:c8:31:46:74:75:9b:41:1c:72:3a:ea:63:51:
4a:73:bd:bf:0c:92:5a:a4:ae:07:73:af:34:23:3c:29:d7:9a:
89:bf:a0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:55 2023 by rpki-client on console-ams.rpki-client.org